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off-the-shelf  (COTS)  and  Air  Eorce-unique  software  acquired  by  the  Air  Eorce  (other  than  software 
internal  to  a  weapon  system;  see  AEPD  63-1,  Acquisition  System).  Send  recommended  changes  or  com¬ 
ments  to  Headquarters  Air  Eorce  Communications  Agency  (HQ  AECA/ITPP),  203  W.  Eosey  Street, 
Room  1065,  Scott  AEB  IE  62225-5222,  through  appropriate  channels,  using  AE  Eorm  847,  Recommen¬ 
dation  for  Change  of  Publication,  with  an  information  copy  to  HQ  AECA/ITC,  203  W.  Eosey  Street, 
Room  3065,  Scott  AEB  IE  62225-5222.  Refer  to  Attachment  I  for  a  glossary  of  references  and  support¬ 
ing  information. 
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Section  A — Introduction 

1.  Purpose  .  This  instruction  provides  the  guidance  and  procedures  that  personnel  must  use  to  plan, 
develop,  use,  maintain,  or  support  Air  Force  software  to  effectively  and  efficiently  complete  their 
assigned  missions.  It  applies  to  Air  Force-procured  COTS  software  and  software  developed  for  unique 
Air  Force  purposes  (other  than  software  internal  to  a  weapon  system;  see  AFPD  63-1).  Maintain  and  dis¬ 
pose  of  records  created  as  a  result  of  the  processes  described  in  this  instruction  in  accordance  with 
AFMAN  37-139,  Records  Disposition  Schedule  (will  convert  to  AFI  33-322  Volume  4  [AFI  33-322V4]). 

2.  Objectives . 

2.1.  Gives  commanders  and  users  of  software  at  all  levels  guidance  for  managing  licensed  and  other 
software  used  by  Air  Force  personnel. 

2.2.  References  requirements  for  standardizing  documentation  and  implementation  processes. 
Section  B — Responsibilities 

3.  Headquarters  United  States  Air  Force  Directorate  of  Communications  and  Information  (HQ 
USAF/SC). 

3.1.  Establishes  and  oversees  computer  software  management  regulatory  and  policy  guidelines. 

3.2.  Implements  Federal  Chief  Information  Officers  Council’s  recommendations  for  Air  Force  acqui¬ 
sition  and  use  of  computer  software,  and  monitoring  and  combating  the  use  of  unauthorized  computer 
software. 

3.3.  Ensures  compliance  with  DoDD  8320.1,  DoD  Data  Administration,  September  26,  1991. 

4.  Major  Command  (MAJCOM),  Direct  Reporting  Unit  (DRU),  Field  Oper  ating  Agency  (FOA), 
and  Organizational  Commanders. 

4.1.  All  MAJCOM/DRU/EOA  communications  and  information  systems  officers  (CSO),  where 
assigned,  or  commanders  representatives  where  not  assigned,  will: 

4.1.1.  Conduct  and  document  an  annual  inventory  of  licenses  as  required  by  E.O.  13103. 

4.1.2.  Establish  a  process  to  track  licenses  (see  paragraph  9.). 

4.1.3.  Develop  performance  measurements  and  metrics  for  software  license  requirements  as 
required  by  E.O.  13103. 

4.1.4.  Identify  enterprise  software  license  requirements  and  management  training  requirements 
not  covered  in  existing  courses  to  HQ  AECA  for  annual  consolidation. 

4.2.  Compare  licensing  purchasing  options  including  analysis  of  an  enterprise-wide  COTS  software 
license  as  an  option  for  satisfying  COTS  software  requirements. 

4.3.  Plan  and  budget  for  support  of  software  licenses  and  unique  mission  software  through  the 
information  systems  life  cycle  and  arrange  for  software  support  at  deployment  locations,  when 
needed. 
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4.4.  Obtain  COTS  software  under  Department  of  Defense  (DoD)-wide  and  Air  Force  enterprise 
licenses  rather  than  individual  client  or  server  purchases.  Accomplish  comparative  analysis  of 
enterprise  licenses  purchase  opportunities  to  ensure  Air  Force  receives  the  best  value.  Coordinate 
with  the  host  communications  unit  or  servicing  Network  Control  Center  before  making  any  software 
purchases. 

5.  Headquarters  Air  Force  Communications  Agency  . 

5.1.  Surveys  and  consolidates  MAJCOM,  FOA,  and  DRU  requirements  for  potential  Air  Force 
enterprise  software  licenses  for  COTS  computer  and  network  management  software. 

5.2.  Recommends  candidate  software  products  for  potential  Air  Force- wide  licensing  to  the  Air  Force 
Materiel  Command  (AFMC)  product  center  designated  with  the  responsibility  for  enterprise  license 
management. 

5.3.  Consolidates  new  MAJCOM  training  for  managing  software  licenses  (including  computer-based 
initiatives)  and  sends  them  to  Headquarters  Air  Education  and  Training  Command  (HQ  AETC/SCX, 
61  Main  Circle  Suite  2,  Randolph  AEB  TX  78150-4545)  for  incorporating  formal  courses  or  in 
long-distance  learning  approaches. 

6.  Headquarters  Air  Force  Materiel  Command  . 

6.1.  Designates  a  product  center  as  the  office  of  primary  responsibility  (OPR)  for  managing  the  Air 
Force  Enterprise  Software  Eicense  Program  and,  when  designated,  acts  as  executive  agent  for 
establishing  DoD-wide  enterprise  software  licenses. 

6.2.  Designates  a  product  center  as  purchasing  agent  for  software  licenses  to  support  consolidated 
and  programmatic  Air  Force  requirements. 

6.3.  Manages  Air  Force  Enterprise  Software  Eicenses  for  COTS  computer  and  network  management 
software. 

7.  Headquarters  Air  Education  and  Training  Command  . 

7.1.  Develops  training  plans  and  materials  for  comprehensive  training  that  addresses  all  aspects  of 
managing  the  operation  of  installation-level  licensed  software. 

7.2.  Establishes  curricula  for  formal  licensed  software  management  courses  identified  by  HQ  AFC  A/ 
ITC  in  coordination  with  Headquarters  Air  Force  Communications  and  Information  Center  (HQ 
AFCIC/ITA). 

7.3.  Provides  training  through  centrally  managed  computer  based  training  courses  or  other  distance 
learning  approaches. 

8.  Individual  Commercial  Off-The-Shelf  Software  Users  . 

8.1.  Do  not  install  and  use  copies  of  government-owned  software  on  a  home  computer  unless  the 
software  license  explicitly  allows  users  to  do  so  and  the  base  CSO  has  authorized  such  use.  When 
authorized  for  installation  on  a  home  computer,  only  use  the  software  for  official  Air  Force  business. 
Personal  use  may  be  a  violation  of  The  Copyright  Act,  rendering  the  individual  user  accountable  and 
liable. 
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8.2.  Do  not  install  freeware,  shareware,  or  personally  owned  software  on  government  systems 
without  approval  of  the  system  administrator  or  network  manager  servicing  your  organization, 
according  to  AFI  33-115V1,  Network  Management',  and  AFI  33-202,  Computer  Security. 

8.3.  Do  not  make  any  illegal  copies  of  copyrighted  software. 

Section  C — Installation-Level  Software  Management 

9.  Managing  Licensed  Commercial  Off-The-Shelf  Software  .  The  communications  squadron 
commander  or  CSO  at  each  installation  who  implements  licensed  COTS  or  other  software  shall: 

9.1.  Develop  and  implement  a  documented  process  to  ensure  that  all  software  (including  freeware, 
shareware,  licensed  COTS  products,  and  pre-production  versions)  is  free  of  viruses  and  malicious 
logic. 

9.2.  Annually  instruct  personnel  on  licensed  software  usage;  The  Privacy  Act  and  The  Copyright  Act 
considerations;  and  Air  Force,  DoD  and  E.O.  provisions. 

9.3.  Register  organization  ownership  of  licensed  COTS  software  and  ensure  an  annual  inventory  is 
conducted  of  all  licensed  COTS  software  in  the  organization. 

9.4.  Use  a  metering  mechanism  if  licensed  for  server-hosted,  concurrent-user  application  software  to 
prevent  exceeding  the  authorized  number  of  copies  and  users.  Record  network  manager  or  system 
administrator  inventory  of  licensed  client  and  network  software  as  part  of  the  annual  installation 
licensed  software  inventory. 

9.5.  Maintain  a  record  of  the  COTS  software  controlled  by  the  organization. 

9.6.  Store  evidence  (e.g.,  user  manual,  purchase  documentation,  compact  disk,  etc.)  of  licenses  in  a 
secure  location  (e.g.,  a  locked  file  cabinet). 

9.7.  Dispose  of  old  versions  of  COTS  software  according  to  licensing  agreements.  Upgrades  from 
the  original  software  source  are  normally  considered  a  continuation  of  the  original  license,  not  an 
additional  or  new  license. 

9.8.  Redistribute  excess  or  superseded  COTS  software  if  it: 

9.8.1.  Is  allowed  under  the  license  agreement  or  upgrade  policy  for  that  software. 

9.8.2.  Is  not  classified. 

9.8.3.  Did  not  provide  direct  security  protection  to  automated  data  processing  equipment  in 
systems  that  processed  classified  information. 

9.8.4.  Is  not  directly  related  to  or  associated  with  a  weapon  system,  intelligence  system,  command 
and  control  system,  communications  system,  or  tactical  system. 

9.8.5.  Still  operates  as  intended. 

9.9.  Dispose  of  excess  or  superseded  COTS  software  not  redistributed  by  one  of  the  following  meth¬ 
ods: 


9.9.1.  Return  the  software  package  (distribution  media,  manuals,  etc.)  to  the  company  that 
developed  the  software. 
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9.9.2.  Destroy  the  software  according  to  the  provisions  of  the  licensing  agreement.  (NOTE: 
Document  the  method  of  destruction  to  establish  an  audit  trail.)  This  may  include: 

9.9.2. 1.  Destroying  the  documentation  and  distribution  media. 

9.9. 2. 2.  Formatting  or  erasing  the  master  floppy  disks. 

9.9. 2. 3.  Using  the  master  floppy  disks  as  scratch  disks. 

9.9.3.  Audit  all  computer  and  server  software  annually  to  ensure  there  are  no  illegal  or 
unauthorized  copies  of  COTS  or  other  software  installed.  Sampling  procedures  may  be  used  if 
active  inventorying  is  available. 

10.  Software  Developed  Using  Commercial  Off-The-Shelf  Office  Software  Tools .  Air  Force 
computer  users  are  encouraged  and  expected  to  use  their  licensed  COTS  office  software  to  increase  their 
individual  professional  productivity  and  overall  unit  effectiveness.  Users  must  coordinate  networked  or 
“group”  computer  applications  that  are  user  built  with  these  tools  with  the  installation  CSO.  This 
precludes  later  impact  on  network  and  server  capacity,  avoids  duplication  of  effort  on  similar  application 
software  within  the  installation  or  MAJCOM,  and  ensures  continued  software  support  after  departure  of 
one  or  more  of  the  original  user-developers.  Air  Force  user-developers  shall: 

10.1.  Ensure  the  Air  Force  retains  property  rights  to  the  computer  software  developed  in  the  course  of 
their  duties. 

10.2.  Not  by-pass  computer/network  server  operating  systems,  security  systems,  or  access  controls 
provided  by  higher  authority. 

10.3.  Provide  the  CSO  a  software  documentation  package  in  appropriate  digital  format.  The  software 
package  must  include: 

10.3. 1 .  The  author  or  point  of  contact,  organization,  and  telephone  number. 

10.3.2.  A  descriptive  unclassified  title  with  version  number  as  the  first  delivery  (use  Version  1.0). 

10.3.3.  A  brief  (one  paragraph)  unclassified  description  of  the  software’s  functionality  for  use  in 
publishing  software  reuse  catalogs;  and  a  classified  description,  if  necessary,  to  more  fully  explain 
the  software’s  capabilities. 

10.3.4.  A  brief  description  of  all  testing  (such  as  Year  2000)  performed  on  the  mission  application 
software  and  its  databases. 

10.3.5.  A  brief  user’s  guide.  The  user’s  guide  should  include: 

10.3.5.1.  The  hardware  configuration  required. 

10.3.5.2.  The  supporting  software  required  to  include  the  operating  system  and  (if  any) 
supporting  COTS  software  with  version  release  number. 

10.3.5.3.  Compiling  and  linking  instructions,  if  applicable. 

10.3.5.4.  Descriptions  of  the  software  installation  process,  required  hardware  setup,  menus, 
and  software  capabilities  and  functions. 

10.3.5.5.  Samples  of  terminal  output  screens  and  print  products  produced  (if  any). 

10.3.5.6.  Other  information  useful  for  continued  effective  use  and  maintenance  of  the  mission 
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application  software. 

11.  Command,  Control,  Communications,  Computers,  and  Intelligence  (C4I)  Software 
Development;  Reuse;  and  Release.  Adhere  to  DoDD  3405.1;  DoDD  4630.5,  Compatibility, 
Interoperability,  and  Integration  of  Command,  Control,  Communications,  and  Intelligence  ( C3I) 
Systems,  November  12,  1992;  DoD  Instruetion  (DoDI)  4630.8,  Procedures  for  Compatibility, 
Interoperability,  and  Integration  of  Command,  Control,  Communications,  and  Intelligence  ( C3I) 
Systems,  November  18,  1992;  and  Chairman  Joint  Chiefs  of  Staff  Instruction  (CJCSI)  6212. OlA, 
Compatibility,  Interoperability,  and  Integration  of  Command,  Control,  Communications,  Computers,  and 
Intelligence  Systems,  30  June  1995;  when  developing  mission  or  application  software  for  C4I  systems. 

11.1.  Organie  Development.  Do  not  develop  software  organically  unless  quality,  cost,  performance, 
schedule,  or  interoperability  requirements  cannot  be  met  with  COTS  or  non-developmental  item 
software. 

11.1.1.  Acquire  an  approved  mission  needs  statement  before  developing  organic  software  requir¬ 
ing  over  6  man-months  of  effort  or  costing  in  excess  of  $50,000,  and  follow  guidanee  for  software 
acquired  under  DoD  5000-series  acquisitions. 

11.1.2.  All  units  that  develop  or  maintain  software  will  have  a  software  proeess  improvement 
(SPI)  program  and  a  doeumented  SPI  plan,  including  at  least: 

1 1 . 1 .2. 1 .  A  baseline  of  their  eurrent  eapabilities. 

1 1 . 1.2.2.  Goals  and  milestones  they  intend  to  reaeh. 

1 1.1. 2. 3.  Metrics  to  measure  their  progress  toward  their  goals  and  milestones. 

11.1.2.4.  Timeline  for  SPI  appraisals.  The  Software  Teehnology  Support  Center  (STSC)  at 

Hill  Air  Force  Base  UT  is  available  on  a  fee-reeovery  basis  for  SPI  appraisals,  but  any 

qualified  SPI  appraiser  may  be  used. 

1 1. 1. 2. 5.  Identify  life-eyele  support  requirements  for  the  life  of  developed  software. 

1 1.2.  Releasing  COTS  Offiee  Software  Tools.  It  is  Air  Foree  poliey  to  release,  upon  eonsideration  of 
a  valid  written  request,  speeifie  software  developed  exelusively  with  government  funds  or  otherwise 
owned  by  the  Air  Foree.  The  OPR  for  the  software  deeides  to  release  or  diselose  that  software.  The 
approval  authority  may  be  at  a  higher  level  depending  upon  the  reeipient  (e.g.,  approval  authority  for 
all  foreign  release  requests  is  Seeretary  of  the  Air  Force  [SAF/IADD]).  When  not  for  foreign  release 
and  the  OPR  is  in  doubt  regarding  the  release  of  software,  send  the  request  to  HQ  USAF/SCX,  1250 
Air  Foree  Pentagon,  Washington  DC  20330-1250,  for  resolution.  Freedom  of  Information  Act 
(FOIA)  requests  must  be  sent  to  the  loeal  FOIA  manager  to  eontrol  and  respond  using  guidelines  in 
the  Air  Foree  supplement  to  DoD  5400.7-R  (DoD  5400.7-R/AFSUP),  DoD  Freedom  Of  Information 
Act  Program,  22  July  1999.  Before  releasing  the  software,  the  OPR  shall  require  the  requester  to  sign 
a  memorandum  of  agreement  (see  Attachment  2).  Releases  of  Air  Force-owned  or  developed 
software  from  software  reuse  libraries,  or  software  under  Air  Foree-industry  Cooperative  Researeh 
and  Development  Agreements  (CRADA),  are  exeeptions  to  this  poliey. 

12.  Configuration  Management .  Define  and  manage  the  configuration  of  computer  software 
aceording  to  commercial  standards  (i.e.,  those  developed  by  the  International  Standards  Organization, 
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American  National  Standards  Institute,  or  Institute  of  Electrical  and  Electronic  Engineers,  and  best 
practices  advocated  by  the  Software  Engineering  Institute,  and  the  STSC  at  Hill  AEB  UT). 

13.  Information  Assurance  .  Program  managers  and  software  developers  must  integrate  information 
assurance  into  their  systems  using  guidance  contained  in  AEPD  33-2,  Information  Protection  (converting 
to  Information  Assurance);  the  Air  Eorce  33-200  series  publications;  and  Air  Eorce  systems  security 
instructions  and  memoranda  listed  in  Air  Eorce  Index  (AEIND)  5,  Numerical  Index  of  Specialized 
Information  Protection  Publications.  These  publications  give  policy  guidelines  for  developing  and  using 
the  computer,  communications,  and  emissions  security  programs  needed  for  all  Air  Eorce 
communications  and  information  systems. 

14.  Open  Systems  Guidelines  .  The  Air  Eorce  is  committed  to  meeting  the  DoD  objective  of 
developing  interoperable  and  maintainable  systems  based  on  open  standards.  To  that  end,  system 
developers,  contract  administrators,  and  maintainers  must  adhere  to  the  guidance  given  in  the  DoD  Joint 
Technical  Architecture  (JTA)  and  JTA-Air  Eorce  (JTA-AE).  These  documents  identify  a  common  set  of 
mandatory  information  technology  standards  and  guidelines  used  in  all  new  systems  and  system  upgrades 
in  the  DoD.  Each  unit  ensures  that  upgrades  to  systems  under  maintenance  comply  to  the  maximum 
extent  possible  with  the  JTA  and  JTA-AE. 

15.  Software  Reuse  .  Software  reuse  is  the  practice  of  using  existing  software  components  to  develop 
new  software  applications.  Software  reuse  benefits  the  Air  Eorce  through  increased  developer 
productivity,  improved  quality  and  reliability  of  software-intensive  systems,  enhanced  system 
interoperability,  lowered  program  technical  risk,  and  shortened  software  development  and  maintenance 
time. 

15.1.  Reusable  software  components  may  include  executable  software  binaries,  source  code 
segments,  program  documentation,  project  plans,  requirement  descriptions,  design  and  architecture 
documents,  database  schemas,  test  data  and  test  plans,  user’s  manuals,  software  tools,  and  object 
classes.  These  assets  can  be  most  efficiently  used  when  designed  and  packaged  to  fit  into  a 
product-line  architecture  at  each  software  development  location  for  a  specific  mission  area  or 
functional  domain,  using  interface  standards  and  common  communications  protocols.  The  domain 
product-line  components  can  then  be  used  to  create  families  of  related  systems  designed  to  share 
common  software  architecture  for  the  domain. 

15.2.  Each  Air  Eorce  software  development  location  should: 

15.2.1.  Establish  a  software  reuse  library  or  repository  for  internal  sharing  of  the  reusable 
software  components  developed  at  the  location. 

15.2.2.  Report  each  reusable  software  component  to  the  Air  Eorce  Reuse  Center,  Standard 
Systems  Group,  Maxwell  AEB -Gunter  Annex  AE,  for  storage  in  the  Air  Eorce  Defense  Software 
Repository  System. 

15.2.3.  Upon  valid  written  request,  release  software  component  using  the  software  release 
memorandum  of  agreement  at  Attachment  2. 

16.  Data  Administration  .  All  Air  Eorce  organizations  developing  software  or  overseeing  software 
development  contracts  follow  the  guidelines  published  in  AEI  33-110,  Data  Administration  Program; 
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DoDD  8320.1;  DoD  8320. 1-M,  Data  Administration  Procedures,  March  29,  1994;  and  DoD  8320.1-M-l, 
Data  Standardization  Procedures,  April  2,  1998.  Contact  HQ  AFCA/ITC  for  additional  guidance. 

17.  Bandwidth  .  The  Air  Force  is  faced  with  restrictions  on  the  amount  of  information  that  can  be 
provided  to  our  forces,  particularly  in  remote  areas  of  the  world.  Therefore,  software  systems  designers 
and  developers  must  discipline  themselves  in  the  quantity  and  content  of  non-mission  essential 
information  sent  over  supporting  network  infrastructures  (that  is,  ensure  sending  only  operationally 
necessary  data).  In  addition  to  DoD  direction,  follow  all  policy  and  procedures  in  AFIs  33-101, 
Communications  and  Information  Management  Guidance  and  Responsibilities',  33-115V1;  33-119, 
Electronic  Mail  (E-Mail)  Management  and  Use',  and  33-129,  Transmission  of  Information  Via  the 
Internet',  on  downloading  from  the  Internet,  transmission  of  e-mail  attachments,  video  teleconferencing, 
Web  browsing,  and  conservation  measures  during  periods  of  surge  or  network  degradation.  Air 
Force-developed  software  (including  that  developed  specifically  for  the  Air  Force)  will  accommodate 
network  infrastructure  considerations  into  its  systems  design  and  internal  code,  such  that  it  does  not 
overtax  the  infrastructure  that  it  relies  and  operates. 

18.  Checklists  .  Use  AF  Form  2519,  All  Purpose  Checklist  (available  electronically),  to  develop  a 
checklist  on  software  and  software  license  management  using  paragraphs  3.  through  8. 


GARY  A.  AMBROSE,  Brig  General,  USAF 
Acting  Director,  Communications  and  Information 
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Attachment  1 

GLOSSARY  OF  REFERENCES  AND  SUPPORTING  INFORMATION 


References 

E.O.  13103,  Computer  Software  Piracy,  September  30,  1998 
Freedom  of  Information  Act 
The  Copyright  Act 

The  Information  Technology  Management  Reform  Act  (Division  E  of  Public  Eaw  104-106) 

The  Privacy  Act 

CJCSI  6212. OlA,  Compatibility,  Interoperability,  and  Integration  of  Command,  Control, 
Communications,  Computers,  and  Intelligence  Systems,  30  June  1995 

DoDD  3405.1,  Computer  Programming  Language  Policy,  April  2,  1987 

DoDD  4630.5,  Compatibility,  Interoperability,  and  Integration  of  Command,  Control,  Communications, 
and  Intelligence  (C3I)  Systems,  November  12,  1992 

DoDI  4630.8,  Procedures  for  Compatibility,  Interoperability,  and  Integration  of  Command,  Control, 
Communications,  and  Intelligence  (C3I)  Systems,  November  18,  1992 

DoD  5400.7-R/AESUP,  DoD  Freedom  of  Information  Act  Program,  22  July  1999 

DoDD  8320.1,  DoD  Data  Administration,  September  26,  1991 

DoD  8320. 1-M,  Data  Administration  Procedures,  March  29,  1994 

DoD  8320.1-M-l,  Data  Standardization  Procedures,  April  2,  1998 

AEIND  5,  Numerical  Index  of  Specialized  Information  Protection  Publications 

API  21-116,  Maintenance  Management  of  Communications-Electronics 

APPD  33-1,  Command,  Control,  Communications,  and  Computer  (C4)  Systems 

APPD  33-2,  Information  Protection  (converting  to  Information  Assurance) 

API  33-101,  Communications  and  Information  Management  Guidance  and  Responsibilities 

API  33-110,  Data  Administration  Program 

API  33-1 15V1,  Network  Management 

API  33-119,  Electronic  Mail  (E-Mail)  Management  and  Use 

API  33-129,  Transmission  of  Information  Via  the  Internet 

API  33-202,  Computer  Security 

APDIR  33-303,  Compendium  of  Communications  and  Information  Terminology 
APMAN  37-139,  Records  Disposition  Schedule  (will  convert  to  API  33-322V4) 

APPD  63-1,  Acquisition  System 
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Information  Security  Products  Catalog,  published  annually  and  updated  quarterly  by  the  National 
Security  Agency,  gives  evaluation  information  on  computer  security  (COMPUSEC),  cryptographic, 
emission-tested  security,  and  destruction  equipment. 

Air  Force  Assessed  Products  List,  available  on  the  HQ  AFCA/GCI  home  page,  gives  information  on 
COMPUSEC  system  and  subsystem  assessments  requested  by  Air  Force  users. 

Abbreviations  and  Acronyms 

AFI — Air  Force  Instruction 

AFIND — Air  Force  Index 

AFMC — Air  Force  Materiel  Command 

AFPD — Air  Force  Policy  Directive 

C4 — Command,  Control,  Communications,  and  Computers 

C4I — Command,  Control,  Communications,  Computers,  and  Intelligence 

CJCSI — Chairman  Joint  Chiefs  of  Staff  Instruction 

COMPUSEC — Computer  Security 

COTS— Commercial  Off-the-Shelf 

CRADA — Cooperative  Research  and  Development  Agreements 

CSO — Communications  and  Information  Systems  Officer 

DoD — Department  of  Defense 

DoDD — Department  of  Defense  Directive 

DoDI — Department  of  Defense  Instruction 

DRU — Direct  Reporting  Unit 

E.O. — Executive  Order 

FOA — Field  Operating  Agency 

FOIA — Freedom  of  Information  Act 

HQ  AETC — Air  Education  and  Training  Command 

HQ  AFCA — Air  Force  Communications  Agency 

HQ  AFCIC — Air  Force  Communications  and  Information  Center 

HQ  USAF — Headquarters  United  States  Air  Force 

JTA  — Joint  Technical  Architecture 

JTA-AF  — Joint  Technical  Architecture- Air  Force 

MAJCOM — Major  Command 

OPR — Office  of  Primary  Responsibility 

SAF — Secretary  of  the  Air  Force 
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SPI — Software  Process  Improvement 
STSC — Software  Technology  Support  Center 

Terms 

Certification — For  purposes  of  this  instruction,  the  act  of  determining  that  software  performs  without 
defects  and  viruses,  and  does  what  the  supporting  documentation  says  it  will  do  in  accordance  with  any 
specified  acceptance  criteria. 

Command,  Control,  Communications,  and  Computer  (C4)  Systems — Integrated  systems  of  doctrine, 
procedures,  organizational  structures,  personnel,  equipment,  facilities,  and  communications  designed  to 
support  a  commander’s  exercise  of  command  and  control,  across  the  range  of  military  operations.  Also 
called  “communications  and  information  systems.” 

Commercial  Off-The-Shelf  (COTS)  Software  — Software  developed,  tested,  and  sold  by  commercial 
companies  to  the  general  public.  Examples  include  word  processors,  databases,  application  generation, 
drawing,  compiler,  graphics,  communications,  and  training  software. 

Communications  and  Information  Systems  Officer  (CSO) — Identifies  the  supporting  CSO  at  all 

levels.  At  base  level,  this  is  the  commander  of  the  communications  unit  responsible  for  carrying  out  base 
communications  and  information  systems  responsibilities,  the  base  CSO.  Tenant  organizations  may  also 
have  CSOs.  At  MAJCOM,  and  other  activities  responsible  for  large  quantities  of  communications  and 
information  assets,  it  is  the  person  designated  by  the  commander  as  responsible  for  overall  management 
of  communications  and  information  assets  budgeted  and  funded  by  the  MAJCOM  or  activity.  The  CSO 
function,  when  under  the  base  communications  unit,  uses  the  office  symbol  “SC”  that  expands  to  three 
and  four  digits  to  identify  specific  functional  areas. 

Computer  Security  (COMPUSEC)— 1 .  The  protection  resulting  from  all  measures  to  deny 
unauthorized  access  and  exploitation  of  friendly  computer  systems.  See  also  “communications  security”. 
2.  Measures  and  controls  that  ensure  confidentiality,  integrity,  and  availability  of  information  systems 
assets  including  hardware,  software,  firmware,  and  information  being  processed,  stored,  and 
communicated. 

Copyright — Without  a  license  that  specifies  otherwise,  the  purchaser’s  use  of  software  is  restricted  to 
making  an  archival  copy  and  installing  the  computer  program  onto  a  single  computer,  in  accordance  with 
the  Copyright  Act  of  1976.  Do  not  reproduce  or  use  copyrighted  software  in  any  other  manner. 

Documentation — Records  required  to  plan,  develop,  operate,  maintain,  and  use  electronic  records  and 
software.  Included  are  systems  specifications,  file  specifications,  code  books,  record  layouts,  user  guides, 
and  output  specifications. 

Hardware — The  physical  equipment  and  devices  forming  a  computer  and  peripheral  components. 

Interoperability  The  ability  of  systems,  units,  or  forces  to  provide  services  to  and  accept  services  from 
other  systems,  units,  or  forces  and  to  use  the  services  so  exchanged  to  enable  them  to  operate  effectively 
together.  The  condition  achieved  among  communications-electronics  systems  or  items  of  communica¬ 
tions -electronics  equipment  when  exchanging  information  or  services  directly  and  satisfactorily  between 
them  and/or  their  users. 

License  Agreements — Contracts  between  the  software  publisher  and  the  user  that  instruct  and  limit  the 
software  use.  When  purchasing  software,  the  buyer  only  acquires  a  license  to  use  it.  The  publisher  retains 
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the  full  rights  to  the  software  and  has  the  sole  right  to  its  further  distribution  and  reproduction. 

Maintenance — Any  job  described  as  one  that  eliminates  faults  or  keeps  hardware  or  software  running  in 
satisfactory  working  condition  falls  into  the  maintenance  category.  (See  AFI  21-116,  Maintenance 
Management  of  Communications-Electronics .) 

Network — Two  or  more  computers  connected  to  each  other  through  a  multi-user  system  or  by  other 
electronic  means  to  exchange  information  or  share  computer  hardware  or  software. 

Requirement — A  need  for  a  new  or  improved  information  processing  capability  that,  when  satisfied, 
increases  the  probability  of  operational  mission  success  or  decreases  the  cost  of  mission  support. 

Reuse — The  process  of  developing  or  supporting  a  software  intensive  system  using  existing  software 
assets.  (See  DoDD  3405.1.) 

Sensitive  Information — The  loss,  misuse,  unauthorized  access  to,  or  modification  of  information  that 
could  adversely  affect  the  national  interest  or  the  conduct  of  federal  programs,  or  the  privacy  to  which 
individuals  are  entitled  under  Title  5  U.S.C.  Section  522a  {The  Privacy  Act),  but  that  has  not  been 
specifically  authorized  under  criteria  established  by  an  E.O.  or  an  Act  of  Congress  to  be  kept  SECRET  in 
the  interest  of  the  national  defense  or  foreign  policy.  (See  Air  Eorce  Directory  [AEDIR]  33-303, 
Compendium  of  Communications  and  Information  Terminology.) 

Shareware — Privately  or  commercially  developed  software  that  users  receive  free  of  charge  but  pay  a  fee 
for  continued  or  extended  use.  Normally,  implied  or  promised  support  by  the  author  is  minimal  or 
nonexistent.  (See  AEDIR  33-303.) 

Software — A  set  of  computer  programs,  procedures,  and  associated  documentation  concerned  with  the 
operation  of  a  data  processing  system  (for  example,  compilers,  library  routines,  and  manuals). 

User — The  individual  who  operates  the  computer  or  uses  application  software. 
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Attachment  2 

RELEASE  OF  SOFTWARE 

A2.1.  Software  Reuse  .  It  is  HQ  USAF  policy  to  consider  releasing  specific  software  upon  receiving  a 
valid  written  request. 

A2.1.1.  Software  is  available  from  the  Central  Archive  for  Reusable  Defense  Software,  the  Defense 
Software  Repository  System,  or  the  Air  Force  Defense  Software  Repository  System.  In  such  releases, 
the  memorandum  of  agreement  at  paragraph  A2.3.  need  not  be  completed. 

A2.1.2.  As  government  furnished  property  software  is  available  under  the  provisions  of  an  acquisi¬ 
tion  contract.  NOTE:  When  the  government  has  unlimited  rights  in  computer  software  in  the  posses¬ 
sion  of  a  contractor,  the  government  will  not  pay  for  the  use  of  such  software  in  performance  of 
government  contracts  or  for  the  later  delivery  to  the  government  of  such  computer  software,  provided 
that  the  contractor  be  entitled  to  compensation  for  converting  the  software  into  the  prescribed  form  for 
reproduction  and  delivery  to  the  government.  In  addition  to  adhering  to  the  specific  contract’s  provi¬ 
sions,  the  contractor  also  must  sign  the  memorandum  of  agreement  at  paragraph  A2.3. 

A2.1.3.  Software  is  also  available  to  organizations  with  which  the  Air  Force  does  not  have  a  contrac¬ 
tual  arrangement.  In  such  situations,  the  recipient  must  sign  the  memorandum  of  agreement  at  para¬ 
graph  A2.3. 

A2.2.  Software  Release  or  Disclosure  .  Each  OPR  bases  the  decision  to  release  or  disclose  software  on 
review  of  all  significant  factors  including  but  not  limited  to,  national  security,  militarily  critical  technol¬ 
ogy/dual  use,  royalty  arrangements,  potential  for  Air  Force-industry  CRADA,  or  pre-existing  license 
agreement  terms  and  conditions. 

A2.2. 1 .  In  all  software  releases,  the  Air  Force  must  ensure  that  it  will  not  be  held  liable  for  any  failure 
of  the  released  software  or  its  continued  maintenance.  This  also  applies  to  Air  Force  software  depos¬ 
ited  in  all  software  reuse  libraries.  As  such,  the  OPR  must  ensure  that  recipients  of  software  from  the 
reuse  libraries  understand  this  waiver  of  warranties  and  damages  liability. 

A2.3.  Memorandum  of  Agreement : 

I/We  the  undersigned,  on  behalf  of  the  Requesting  Organization  listed  below  (hereafter  referred  to  as  the 
"Requester"),  request  release  of  (software  name)  and  understand  and  agree  to  the  following: 


a.  NON-DISCLOSURE  AGREEMENT.  The  Requester  requests  some  or  all  of  the  following  from 

_ (insert  the  name  of  the  specific  Air  Eorce  organization  or  software  reuse  library):  data, 

technical  data,  computer  software,  computer  software  documentation,  computer  programs,  source  code, 
firmware,  and  other  information  of  like  kind,  type,  or  quality,  either  commercial  or  non-commercial,  all  of 
which  may  be  subject  to  limited  rights,  restricted  rights,  government-purpose  license  rights,  patents, 
copyrights,  trade  secret  rights,  or  other  confidential  or  proprietary  constraints  (collectively,  the  "Data"). 
In  consideration  therefore,  the  Requester  agrees: 


1)  That  the  Data  shall  be  used  only  for  government,  non-commercial,  or  non-profit  purposes. 
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2)  To  strictly  abide  by  and  adhere  to  any  and  all  restrictive  markings  placed  on  the  Data,  and  the 
Requester  shall  not  knowingly  disclose  or  release  the  Data  to  third  parties  who  are  not  engaged  in  work 
related  to  government,  non-commercial,  or  non-profit  purposes. 


3)  That  any  restrictive  markings  on  the  Data  shall  be  included  on  all  copies,  modifications,  and 
derivative  works,  or  any  parts  or  portions  thereof;  in  any  form,  manner  or  substance,  which  are  produced 
by  the  Requester  including  but  not  limited  to  incorporation  of  the  Data  into  any  other  data,  technical  data, 
computer  software,  computer  software  documentation,  computer  programs,  source  code,  or  firmware,  or 
other  information  of  like  kind,  type  or  quality.  In  all  such  events.  Requester  shall  clearly  denote  where 
such  Data  initiates  and  concludes  by  use  of  annotations  or  other  standard  markings. 


4)  That  the  government  is  entitled  to  royalty-free  use  of  the  Air  Force-owned  or  -developed  soft¬ 
ware  that  is  released. 


b.  WAIVER  OF  WARRANTIES  AND  EIMITATIONS  OF  DAMAGES  AGREEMENT.  The 
requester  and  the  Approving  Authority  agree  that: 


1)  No  guaranties,  representations,  or  warranties  either  expressed  or  implied  shall  be  construed  to 
exist  in  any  language,  provision,  or  term  contained  in  these  materials  or  in  any  other  documentation  pro¬ 
vided  herewith  (all  such  items  are  collectively  referred  to  as  the  "Agreement"),  and  furthermore,  the 
releasing  organization  disclaims  and  the  requester  waives  and  excludes  any  and  all  warranties  of  mer¬ 
chantability  and  any  and  all  warranties  of  fitness  for  any  particular  purpose. 


2)  The  Requester  shall  obtain  from  the  releasing  organization  all  of  the  "Data"  (defined  in  the 
Non-Disclosure  Agreement  above),  or  any  other  products  or  services  contemplated  by  the  Agreement,  in 
an  "as  is"  condition. 


3)  The  Requestor  agrees  to  hold  harmless  and  indemnify  the  Air  Force  against  any  and  all  loss,  lia¬ 
bility,  cost  or  expense  arising  out  of  the  use  of  any  Data  released  under  this  agreement,  to  include,  but  not 
limited  to,  litigation  costs  or  expenses. 


c.  The  Requester’s  use  of  the  Data  shall  not  prevent  the  government  from  releasing  the  Data  at  any 
point  in  the  future. 


d.  The  Requester  shall  not  offer  the  released  Data  or  any  modified  version  thereof  for  resale  to  the  gov¬ 
ernment,  in  whole  or  as  part  or  subpart  of  a  government  deliverable,  without  explicitly  stating  that  he  is 
doing  so  by  providing  certification  documentation  (e.g..  Section  K  of  the  Government  Solicitation)  to  the 
contracting  officer  before  contract  award. 
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e.  The  Requester  may  use  the  released  Data  in  a  contract  with  the  government,  but  understands  that  the 
government  shall  not  pay  the  Requester  for  rights  of  use  of  such  Data  in  performance  of  government  con¬ 
tracts  or  for  the  later  delivery  to  the  government  of  such  Data.  The  Requester  may  be  entitled  to  compen¬ 
sation  for  converting,  modifying,  or  enhancing  the  Data  into  another  form  for  reproduction  and  delivery 
to  the  government,  if  authorized  under  a  contract  with  the  government. 


f.  The  Requester  is  not  entitled  to  any  released  Data  that  are  subject  to  national  defense  security  classi¬ 
fication  or  the  proprietary  rights  of  others.  The  Requester  shall  report  promptly  the  discovery  of  any  such 
restricted  Data  to  the  USAF  release  approving  authority  below,  and  follow  all  instructions  concerning  the 
use,  safeguarding,  or  return  of  such  Data.  The  Requester  shall  not  copy,  or  make  future  study  or  use  of 
any  released  Data  later  found  to  be  subject  to  such  restrictions. 


g.  As  required,  the  Requester  shall  be  responsible  for  compliance  with  any  proscriptions  on  foreign  dis¬ 
closure  of  the  released  Data  (contained,  for  example,  in  the  Department  of  State  International  Traffic  in 
Arms  Regulations  or  the  Department  of  Commerce  Export  Administration  Regulations). 


h.  There  may  be  a  fee  to  cover  the  copying  and  shipping  of  the  Data  and  any  documentation. 


i.  The  Requester  and  the  Approving  Authority  intend  that  all  agreements  under  this  Memorandum  of 
Agreement  shall  be  governed  by  the  laws  of  the  United  States  of  America. 


NAME  OE  REQUESTOR 
Requesting  Organization/Address 
City,  State,  Zip  Code 


NAME/TITEE  OE  USAE  APPROVING  AUTHORITY 
Air  Eorce  Organization/ Address 
City,  State,  Zip  Code 


Signature  of  Requestor  and  Date 


Signature  of  USAE  Approving  Authority  and  Date 


